使用 rke 安裝 K8s 的程序

這是本文件的舊版！

安裝環境 Ubuntu 20.04.2 LTS x86_64
兩個節點 IP : 10.20.0.35 / 10.20.0.37

apt 更新與安裝套件

sudo apt update
sudo apt-get install unzip curl software-properties-common snap -y

安裝 Docker 19.03.14

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
sudo apt-get install docker-ce=5:19.03.14~3-0~ubuntu-focal docker-ce-cli=5:19.03.14~3-0~ubuntu-focal containerd.io -y

安裝 kubectl

sudo curl -LO https://dl.k8s.io/release/v1.18.17/bin/linux/amd64/kubectl
sudo chmod a+x kubectl
sudo mv ./kubectl /usr/local/bin/
mkdir -p ~/.kube/

關閉 swap
```
sudo swapoff -a
```

所有節點建立 rkeuser 帳號

sudo useradd -s /bin/bash -d /home/rkeuser/ -m -G sudo rkeuser
sudo passwd rkeuser
sudo usermod -aG docker rkeuser

配置免密登入-master節點-10.20.0.35
- master節點-10.20.0.35 產生公鑰
```
ssh-keygen  -t rsa -C '[email protected]'
```
- 將公鑰複製到各節點的 rkeuser 用戶內
```
ssh-copy-id [email protected]
ssh-copy-id [email protected]
```
確認所有節點 rkeuser 可以執行 docker 命令
```
ssh [email protected]
docker ps
```
如有啟動 firewall 要開啟 port
- 6443-KubeAPI
- 2379-etcd

SSH server配置 TCP 轉發

sudo vi /etc/ssh/sshd_config

:
AllowTcpForwarding yes
:

sudo systemctl reload sshd

下載 rke 1.2.7

wget https://github.com/rancher/rke/releases/download/v1.2.7/rke_linux-amd64
sudo mv rke_linux-amd64 /usr/local/bin/rke
sudo chmod +x /usr/local/bin/rke
rke --version

產生 rke 配置 K8s Cluster 檔
```
rke config --name cluster.yml
```

看輸入資訊

localadmin@Cori-test3:~$ rke config --name cluster.yml
[+] Cluster Level SSH Private Key Path [~/.ssh/id_rsa]:
[+] Number of Hosts [1]: 2
[+] SSH Address of host (1) [none]: 10.20.0.35
[+] SSH Port of host (1) [22]:
[+] SSH Private Key Path of host (10.20.0.35) [none]:
[-] You have entered empty SSH key path, trying fetch from SSH key parameter
[+] SSH Private Key of host (10.20.0.35) [none]:
[-] You have entered empty SSH key, defaulting to cluster level SSH key: ~/.ssh/id_rsa
[+] SSH User of host (10.20.0.35) [ubuntu]: rkeuser
[+] Is host (10.20.0.35) a Control Plane host (y/n)? [y]:
[+] Is host (10.20.0.35) a Worker host (y/n)? [n]: y
[+] Is host (10.20.0.35) an etcd host (y/n)? [n]: y
[+] Override Hostname of host (10.20.0.35) [none]:
[+] Internal IP of host (10.20.0.35) [none]: 10.20.0.35
[+] Docker socket path on host (10.20.0.35) [/var/run/docker.sock]:
[+] SSH Address of host (2) [none]: 10.20.0.37
[+] SSH Port of host (2) [22]:
[+] SSH Private Key Path of host (10.20.0.37) [none]:
[-] You have entered empty SSH key path, trying fetch from SSH key parameter
[+] SSH Private Key of host (10.20.0.37) [none]:
[-] You have entered empty SSH key, defaulting to cluster level SSH key: ~/.ssh/id_rsa
[+] SSH User of host (10.20.0.37) [ubuntu]: rkeuser
[+] Is host (10.20.0.37) a Control Plane host (y/n)? [y]: n
[+] Is host (10.20.0.37) a Worker host (y/n)? [n]: y
[+] Is host (10.20.0.37) an etcd host (y/n)? [n]: n
[+] Override Hostname of host (10.20.0.37) [none]:
[+] Internal IP of host (10.20.0.37) [none]: 10.20.0.37
[+] Docker socket path on host (10.20.0.37) [/var/run/docker.sock]:
[+] Network Plugin Type (flannel, calico, weave, canal, aci) [canal]: calico
[+] Authentication Strategy [x509]:
[+] Authorization Mode (rbac, none) [rbac]:
[+] Kubernetes Docker image [rancher/hyperkube:v1.20.5-rancher1]: rancker/jyperkube:v1.18.17-rancher1-1
[+] Cluster domain [cluster.local]: iiidevops-k8s
[+] Service Cluster IP Range [10.43.0.0/16]:
[+] Enable PodSecurityPolicy [n]:
[+] Cluster Network CIDR [10.42.0.0/16]:
[+] Cluster DNS Service IP [10.43.0.10]:
[+] Add addon manifest URLs or YAML files [no]:

檢視與編輯 cluster.yml 內容

nodes:
- address: 10.20.0.35
  port: "22"
  internal_address: 10.20.0.35
  role:
  - controlplane
  - worker
  - etcd
  hostname_override: ""
  user: rkeuser
  docker_socket: /var/run/docker.sock
  ssh_key: ""
  ssh_key_path: ~/.ssh/id_rsa
  ssh_cert: ""
  ssh_cert_path: ""
  labels: {}
  taints: []
- address: 10.20.0.37
  port: "22"
  internal_address: 10.20.0.37
  role:
  - worker
  hostname_override: ""
  user: rkeuser
  docker_socket: /var/run/docker.sock
  ssh_key: ""
  ssh_key_path: ~/.ssh/id_rsa
  ssh_cert: ""
  ssh_cert_path: ""
  labels: {}
  taints: []
services:
  etcd:
    image: ""
:
:

https://www.mdeditor.tw/pl/glor/zh-tw

RKE, K8s

使用 rke 安裝 K8s 的程序

前置作業

各主機節點建立與設定 rkeuser 用戶

安裝 rke 與建立 K8s Cluster

參考網址